Cyber Incident Victim: Faïencerie de Gien
Date:
Feb 2022
Location:
France
Summary
The Faïencerie de Gien was targeted in a cyberattack that disrupted operations by blocking employee workstations, discovered when systems became inaccessible. The incident prompted the company to file a formal complaint, though specific technical details or attribution remain undisclosed. Partial operational paralysis occurred, though the full scope of data or financial impact was not publicly confirmed.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Faïencerie de Gien, a French ceramics manufacturer, experienced a disruptive cyberattack on February 10, 2022. Employees discovered the incident upon arriving at work that morning when their computer systems became unexpectedly locked and inoperable. Yves de Talhouët, the company's CEO, confirmed the attack paralyzed a significant portion of business operations immediately upon detection. The timing of the initial compromise remained unspecified in public reports, though the operational disruption became apparent at the start of the business day on February 10th. No technical details regarding the attack vector or perpetrator affiliation were disclosed by company officials or law enforcement sources referenced in available reporting. The immediate effect centered on system accessibility issues that halted standard workflows across affected departments.

Management filed a formal legal complaint following the discovery of the incident, initiating law enforcement involvement. Public statements did not specify whether data theft occurred alongside the system lockdown or quantify financial losses from operational downtime. The company continued operating under constrained conditions for an unspecified duration while addressing the attack's aftermath. Media coverage published on February 17, 2022—one week post-incident—provided no updates regarding full operational restoration or forensic findings. The cyberattack represented a confirmed disruption to business continuity for the historic manufacturer, though its long-term operational and financial consequences remained undocumented in available sources.
